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PATENT 

IN THE UNITED STATES PATENT AND TRADEMARK OFFICE 

In re application of: Takuya HIRANO 

Serial No. : Not Yet Assigned 
(PCT/JP99/04328) 

Filed: March 13, 2001 

For: QUANTUM CIPHER COMMUNICATION SYSTEM 

PRELIMINARY AMENDMENT 

Commissioner for Patents 

Washington, D.C. 20231 March 13, 2001 

Sir: 

Prior to the calculation of the filing fees of the above application, please amend the 
application as follows: 

TN THE CLAIMS : 

Please amend claims 8-14 as follows: 

8. (Amended) A quantum cipher communication system as set forth in any one of claims 
1-4, 6 or 7, characterized in that threshold values are established, respectively, for positive and 
negative values of said difference signal, and that the state of said transmission signal is 
discriminated on the basis of said threshold values. 

9. (Amended) A quantum cipher communication system as set forth in any one of claims 
1-4, 6 or 7, characterized in that in addition to the phase modulations designed to transmit privacy 
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keys, such as phase modulation is so imparted as described and having a value later determined for 
making a correction for a fluctuation of the difference in optical path between said reference signal 
and said transmission signal which develops by reason of an external cause. 

10. (Amended) A quantum cipher communication system as set forth in any one of claims 
1 -4, 6 or 7, characterized in that such phase modulations are so imparted as described and including 
those for transmitting privacy keys and those with values later determined are randomly repeated. 

1 1 . (Aaiended) A quantum cipher communication system as set forth in any one of claims 
1-4, 6 or 7, characterized in that eavesdropping is detected on the basis of an increase in the error 
rate of said difference signal. 

12. (Amended) A quantum cipher commimication system as set forth in any one of claims 
1-4, 6 or 7, characterized in that eavesdropping is detected on the basis of a change in a Wigner 
distribution function that indicates a quantum mechanical state of said difference signal. 

13. (Amended) Aquantumcipher communication system as set forth in any one of claims 
1-4, 6 or 7, characterized in that said two output lights are converted into corresponding electric 
signals through photoconductor diodes. 
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14. (Amended) A quantum cipher communication system as set forth in any one of claims 
1-4, 6 or 7, characterized in that for said photoconductor diodes, use is made of sihcon 
photoconductor diodes when the hght has a wave length of 600 nm to 900 nm, and of hiGaAs 
photoconductor diodes when the Ught has a wave length of 1000 nm to 1 500 nm. 
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REMARKS 



The above amendments are believed to place the claims in proper condition for examination. 
Early and favorable action is awaited. 

Attached hereto is a marked-up version of the changes made to the claims by the current 
amendment. The attached page is captioned " Version wit h markings to show changes made." 

hi the event there are any additional fees required, please charge our Deposit Account No. 



01-2340. 



Respectfully submitted. 
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VERSION WITH MARKINGS TO SHOW CHANGES NAME 
Claims 8-14 have been amended as follows: 

8. (Amended) A quantum cipher communication system as set forth in any one of claims 
[1 to 7] claims 1-4. 6 or 7. characterized in that threshold values are estabhshed, respectively, for 
positive and negative values of said difference signal, and that the state of said transmission signal 
is discriminated on the basis of said threshold values. 

9. (Amended) A quantum cipher communication system as set forth in any one of claims 
[1 to 8] claims 1-4. 6 or 7. characterized in that in addition to the phase modulations designed to 
transmit privacy keys, such as phase modulation is so imparted as described and having a value later 
determined for making a correction for a fluctuation of the difference in optical path between said 
reference signal and said transmission signal which develops by reason of an external cause. 

1 0. (Amended) A quantum cipher communication system as set forth in any one of claims 
[1 to 9] claims 1-4. 6 or 7. characterized in that such phase modulations are so imparted as described 
and including those for transmitting privacy keys and those with values later determined are 
randomly repeated. 

1 1 . (Amended) A quantum cipher communication system as set forth in any one of claims 
[1 to 10] claims 1-4. 6 or 7 . characterized in that eavesdropping is detected on the basis of an 
increase in the error rate of said difference signal. 

12. (Amended) A quantum cipher communication system as set forth in any one of claims 
[1 to 1 1] claims 1-4. 6 or 7. characterized in that eavesdropping is detected on the basis of a change 
in a Wigner distribution function that indicates a quantum mechanical state of said difference signal. 
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13. (Amended) A quantxmi cipher communication system as set forth in any one of claims 
[1 to 12] claims 1-4, 6 or 7 , characterized in that said two output lights are converted into 
corresponding electric signals through photoconductor diodes. 

14, (Amended) A quantum cipher communication system as set forth in any one of claims 
[1 to 13] claims 1-4. 6 or 7 , characterized in that for said photoconductor diodes, use is made of 
siUcon photoconductor diodes when the light has a wave length of 600 nm to 900 nm, and of hiGaAs 
photoconductor diodes when the light has a wave length of 1000 nm to 1500 nm. 
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SPECIFICATION 

QUANTUM CIPHER COMMUNICATION SYSTEM 

5 Technical Field 

This invention relates to a quantum cipher 
communication system that can be used in distributing privacy 
(secret) keys in order to ensure security of communication. In 
particular, it relates to a quantum cipher communication system 
10 designed to measure or observe the quantum mechanical state of 
a signal being transmitted and to detect such a signal at a 
substantially high quantum efficiency. 

Background Art 

15 The conventional cipher technologies which are designed 

to ensure security of communication include a privacy key cipher 
system that makes use of a common privacy key which is known 
only to proper parties of communication, and a public key cipher 
system that has recourse to a pair of keys, given by a privacy and 

20 a public key. 

Cryptology of the public key cipher system relies for its 
secrecy retainability on the fact that for example, factoring an 
extremely large integer is hard to compute. However, progresses 
in performance of computers, and advancements in distributed 

25 processing techniques using networks have made security by 
that system no longer perfect. 

In contrast, if a privacy key known only to legitimate 
parties of communication can be held in common by the sender 
and recipient, an absolutely secure communication may be 

30 realized. In such recognition in the art, a technique called 
quantum cipher communication has in the recent decade been 
proposed that seeks secrecy retainability for a privacy key to be 
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distributed in a quantum-mechanical principle (J. Cryptology, 5, 
3-28 (1992), C. H. Bennett et al). 

If the principle of quantum mechanics is applied that an 
action to observe or measure necessarily gives a disturbance to 
5 an object observed or measured, any attempt by a wiretapper to 
wiretap gives a change in a signal being transmitted. 

It therefore follows that monitoring a signal to find a 
change in it can divulge the presence of a wiretapper. In specific 
terms, using a quantum cipher allows a privacy key with high 
10 secrecy retainability to be prepared and held in common by and 
between parties at two sites spaced distant. For effecting a 
m quantum ciphering operation or encryption it is conventional to 

^ use a light as the carrier of a transmission signal. And it has 

ry been the common practice to detect a signal light by the photon 

r 15 counting method, a light detecting technique, that uses a 

^ detector which in response to one or more photons incident upon 

H generates electric pulses at a certain given probability called 

Q quantum efficiency. 

However, the quantum cipher communication systems so 
20 far proposed that rely on the photon counting method have failed 
to be practical because of the problems unresolved, both on its 
principle and technologically, which accrue from the method. 

First, the problem on the principle is that the inability to 
check up on the quantum mechanical state of a signal light once 
25 it has been transmitted prevents detecting a wiretap if the 
wiretapper has taken a sophisticated measure such as a quantum 
nondestructive measurement. Stated otherwise, since a 
wiretapper is able to read information on the number of photons 
in a signal light without giving a change in that number of the 
30 photons (the effect of a measurement does appear as a change in 
phase), it follows that counting only the number of photons after 
transmission allows wiretapping to remain unnoticed. 
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Further, there exists the technological problem that a 
detector is unavailable having a high quantum efficiency enough 
to meet with lights of 1.3 //m or 1.5 //m in wave length for 
common use now in light communication systems. Not only does 
5 a loss in detection reduce the transfer rate for data, but on the 
principle it does not give a distinction from an attempt to 
wiretap. 

It is accordingly an object of the present invention to 
provide a quantum cipher communication system that permits 
10 measuring a signal being transmitted in its quantum mechanical 
state. It is also an object of the present invention to provide a 
quantum cipher communication system that permits detecting 
the signal being transmitted at a substantially high quantum 
efficiency. 

15 

Disclosure of the Invention 

In order to achieve the objects mentioned above, the 
present invention provides, a quantum cipher communication 
system in quantum cipher communication using a light signal, 

20 which system is characterized by the step of detecting 
wiretapping based on a change in a quantum-mechanical 
probability distribution defined by an amplitude and a phase of a 
difference signal derived from a signal light which change is 
produced by a wiretapping operation. 

25 The system so constructed as above permits monitoring a 

signal being transmitted in its quantum mechanical state and 
thereby allows detecting a wiretap using a sophisticated measure 
such as a quantum nondestructive measurement, which has 
hitherto been hard to detect, 

30 The present invention also provides a quantum cipher 

communication system in quantum cipher communication using 
a light signal, which system is characterized by the steps of: 
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splitting a light signal from a transmission source side into an 
intense reference signal and a weak transmission signal which is 
so weak that a change in its quantum mechanical state is 
detectable; imparting a phase difference between the said 
5 reference signal and the said transmission signal while they are 
in a process of transmission; superimposing in a transmission 
receiving side the said reference signal and the said transmission 
signal to form two output lights which are opposite in phase and 
producing a difference signal which is represented by a 
y 10 difference between the said two output lights; deriving a 

SJ frequency distribution of the said difference signal as a function 

i^j of a fluctuation of the quantum state of the said transmission 

5f signal; based upon or in accordance with the frequency 

in distribution of the said difference signal, making privacy (secret) 

15 keys respectively at the said transmission source and receiving 
W sides for holding in common thereby; and directly observing the 

yl fluctuation of the quantum state of the said transmission signal. 

J: The system so constructed as described above permits 

detecting a transmission signal at an efficiency as high as its 
20 theoretical upper limit., by virtue of using a reference signal 
which is intense. 

The present invention also provides a quantum cipher 
communication system which includes- a first beam splitter for 
splitting a light from a light source into a transmission signal 
25 and a reference signal; a phase modulating means for imparting 
a phase modulation to the said transmission signal; a light 
attenuator for converting the said transmission signal into a 
weak transmission signal which is so weak that a change in its 
quantum state is detectable; and a phase modulating means for 
30 imparting a phase modulation to the said reference signal, and 
which system also includes, operative after a relative phase 
difference is imparted between the said transmission and 
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reference signals* a second beam splitter for superimposing the 
said phase-modulated weak transmission signal and the said 
phase modulated intense reference signal to form two output 
lights^ a first and a second photoelectric conversion elements for 
5 converting the said two output lights from the said second beam 
splitter into two corresponding electric signals which are 
opposite in phase; and an amplifier for amplifying a difference 
signal representative of a difference between the said two output 
lights to output an amplified corresponding voltage. 

10 The system so constructed as described above permits 

splitting a light signal from a transmission source side into an 
intense reference signal and a weak transmission signal which is 
so weak that a change in its quantum mechanical state is 
detectable; imparting a phase difference between the reference 

15 signal and the transmission signal while they are in a process of 
transmission; superimposing in a transmission receiving side the 
reference signal and the transmission signal to form two output 
lights which are opposite in phase and producing a difference 
signal which is represented by a difference between the two 

20 output lights; deriving a frequency distribution of the difference 
signal as a function of a fluctuation of the quantum state of the 
transmission signal; based upon or in accordance with the 
frequency distribution of the difference signal, making privacy 
(secret) keys respectively at the transmission source and 

25 receiving sides for holding in common thereby; and observing the 
fluctuation of the quantum state of the transmission signal. 
Therefore, detection at a high efficiency and measurement of a 
signal light in its quantum state are realized. 

In a quantum cipher communication system according to 

30 the present invention, the said phase modulating means 
preferably includes a mirror movable by a distance as small as 
the wave length of an incident light. The system so constructed. 
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allows a phase modulation or change to be made with ease. 

In a quantum cipher communication system according to 
the present invention, the said reference signal and the said 
transmission signal are split both in time and as polarized and 
5 then transmitted to travel along a common path. The system so 
constructed and with the common path constituted by a single 
optical fiber provides a quantum cipher communication system 
between two sites spaced across a long distance. 

Further, the present invention provides a quantum 

10 cipher communication system which includes' a first beam 
splitter for splitting a light from a light source into a 
transmission signal and a reference signal; a first light polarizer 
for polarizing the said transmission signal through one of two 
long distance paths; a light attenuator for converting the said 

15 transmission signal into a weak transmission signal which is so 
weak that a change in its quantum state is detectable; a first 
phase modulating means for imparting a predetermined phase 
modulation to the said transmission signal; and a first polarized 
beam splitter for receiving the said intense reference signal 

20 having passed through one of two short distance paths and the 
said transmission signal and returning the received signal to 
travel along a common optical path, which system also includes, 
operative after a relative phase difference is imparted between 
the said transmission and reference signals and included in a 

25 transmission receiving side^ a second polarized beam splitter for 
isolating from each other the said transmission and reference 
signals transmitted through a single optical fiber; a second phase 
modulating means for imparting a phase modulation to the said 
isolated transmission signal through the other of the said two 

30 short distance paths; and a second light polarizer for polarizing 
the said isolated reference signal through the other of the said 
two long distance paths, and which system further includes^ a 
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second beam splitter for superimposing the said transmission 
and reference signals which are coincident with each other in 
time and polarization to produce two output lights; a first and a 
second photoelectric conversion elements for converting the said 
5 two output lights into corresponding electric signals; and an 
amplifier for amplifying a difference signal representative of a 
difference between the said two output lights to output an 
amplified corresponding voltage. 

The system so constructed as described above permits 

10 the transmission and reference signals to travel in different 
paths only in the sender and recipient sides and each of a short 
distance and for the most part along a common path of 
transmission. Thus, a variation of the relative difference in 
optical path between the two signal lights can be made small. 

15 In a quantum cipher communication system according to 

the present invention, there is preferably included a third light 
polarizer in an output side of the said optical fiber for making a 
correction for a disturbance of polarization of the said reference 
signal. 

20 The system so constructed as described above using the 

intense reference signal allows effective correction for 
disturbance in polarization of light or polarized light signals 
while in transmission through the optical fiber. 

Further, in a quantum cipher communication system 

25 according to the present invention, preferably threshold values 
are established, respectively, for positive and negative values of 
the said difference signal, and that the state of the said 
transmission signal is discriminated on the basis of the said 
threshold values. 

30 The system so constructed as described above and 

establishing threshold values permits practical detection 
efficiency and error rate as desired in accordance with the 
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intensity of a transmission signal. 

Also, in a quantum cipher communication system 
according to the present invention, preferably in addition to the 
phase modulations designed to transmit privacy keys, such a 
5 phase modulation is so imparted as described and having a value 
later determined for making a correction for a fluctuation of the 
difference in optical path between the said reference signal and 
the said transmission signal which develops by reason of an 
external cause. 

10 The system so constructed as described above and giving, 

besides phase modulations designed to produce privacy keys, a 
phase modulation with a value later determined allows 
correcting a fluctuation of the difference in optical path and 
measuring the quantum mechanical state concurrently with 

15 producing quantum ciphers.. 

Also, a quantum cipher communication system according 
to the present invention is characterized in that phase 
modulations that monotonically increase and phase modulations 
that are randomly applied may be repeated. The system so 

20 constructed correcting a fluctuation of the difference in optical 
path and measuring the quantum mechanical state 
simultaneously. 

Also, a quantum cipher communication system according 
to the present invention is characterized in that a wiretap is 

25 detected on the basis of an increase in the error rate of the said 
difference signal. The system so constructed notes that the error 
rate in a privacy key increases as the probability that an 
improper phase modulation by wiretapping is performed 
increases and thus permits detecting the presence of 

30 wiretapping. 

Further, a quantum cipher communication system 
according to the present invention is characterized in that a 
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wiretap is detected on the basis of a change in a Wigner 
distribution function that indicates a quantum mechanical state 
of the said difference signal. The system so constructed notes 
that if a transmission signal as separated in part is wiretapped. 
5 its amplifying process is necessarily accompanied by a quantum 
fluctuation which causes a change in the Wigner distribution 
function. Hence, from a change in the Wigner distribution 
function, wiretapping can be detected. 

Also, a quantum cipher communication system according 
10 to the present invention is characterized in that the said two 
output lights are converted into corresponding electric signals 
through photoconductor diodes. The system so constructed allows 
performing measurement at a high quantum efficiency and at a 
good S/N ratio. 

15 Further, a quantum cipher communication system 

according to the present invention is characterized in that for the 
said photoconductor diodes, use is made of silicon photoconductor 
diodes when the light has a wave length of 600 nm to 900 nm, and 
of InGaAs photoconductor diodes when the light has a wave 

20 length of 1000 nm to 1500 nm. The system so constructed allows 
performing measurement at a high quantum efficiency and at a 
good S/N ratio. 

Brief Description of the Drawing s 

25 The present invention will better be understood from the 

following detailed description and the drawings attached hereto 
showing certain illustrative forms of embodiment of the present 
invention. In this connection, it should be noted that such forms 
of embodiment illustrated in the accompanying drawings hereof 

30 are intended in no way to limit the present invention but to 
facilitate an explanation and understanding thereof. 

Fig. 1 is a schematic diagram that illustrates a first form 



-9- 



of embodiment of a quantum cipher communication system 
according to the present invention; 

Figs, 2A and 2B are graphical representations that 
explain a signal that is observed in a recipient side for a signal 
5 light with a fluctuation in its quantum mechanical state not 
taken into account in a quantum cipher communication system 
according to the present invention in which Fig. 2 A is a graphical 
representation showing a relationship of the numbers of photons 
incident onto a pair of photoconductor diode with respect to a 

□ 10 relative difference in optical path between a reference signal 
?i light and a quantum signal light with a diagram inserted 
Si showing in enlargement the relationship in a range in which the 

□ difference in optical path is close to zero, and Fig. 2B is a 
graphical representation of a signal difference between the 

^ 15 reference signal light and the quantum signal light; 

y Figs. 3A to 3D are graphical representations that explain 

a signal that is observed in a recipient side for a signal light with 
O a fluctuation in its quantum mechanical state taken into account, 

the signal being shown for an optical path difference of 0 degree, 
20 90 degrees (A/4), 180 deg rees (/1/2), and 270 degrees (3A/4), 
respectively, in which in each graph the abscissa represents the 
magnitude of a signal difference and the ordinate represents the 
probability that the signal difference is measured; 

Figs. 4A and 4B are graphical representations that 
25 illustrate typical measurement results that were obtained 
according to the first form of embodiment of the present 
invention in which the graph of Fig. 4A shows a frequency 
distribution for the difference signal taken along the ordinate 
with respect to the voltage actually measured 5000 times and 
30 taken along the abscissa and the graph of Fig. 4B illustrates a 
Wigner distribution function derived by computer tomography 
from data that were obtained when such a measurement made to 



~ 10- 



obtain the result shown in Fig. 4A were repeated 30 times; 

Fig. 5 is a tabular diagram that illustrates a quantum 
cipher or encryption procedure according to the present 
invention in which in the left hand side column, numeral 1 is 

5 used to indicate a phase modulation of a sender, numeral 2 a 
phase modulation of a recipient, numeral 3 a sum total of the 
sender's and recipient's phase modulations, numeral 4 a result of 
measurement by the recipient, numeral , numeral 5 indicating 
that the sender notified by the recipient on a public 

10 communication line of the recipient's added phase modulation 
notifies the recipient on a public communication line of mark O 
or OK when the sum total of the sender's and recipient's phase 
modulations becomes equal to 0 or 180 degrees, and x or NG 
(no good) when it becomes equal to 90 or 270 degrees, numeral 6 

15 indicating that the recipient makes a privacy (or secret) key 
when O is obtained by assigning bit 1 to plus (+) and bit 0 to 
minus (-), and numeral 7 indicating that the sender makes a 
privacy key by assigning bit 1 when the sum total is 0 or 90 
degrees and bit 0 when the sum total is 180 or 270 degrees; 

20 Fig. 6 is a schematic diagram that illustrates a second 

form of embodiment of the quantum cipher communication 
system according to the present invention; and 

Fig. 7 is a tabular diagram that illustrates a quantum 
cipher or encryption procedure for the system in the second form 

25 of embodiment shown in Fig. 6. 

Bpst Modes for Carrying Out the Invention 

Hereinafter, the present invention will be described in 
detail with reference to suitable forms of embodiment thereof 
30 illustrated in the drawing figures. While the present invention 
will hereinafter been set forth with respect to certain illustrative 
forms of embodiments thereof, it will readily be appreciated to be 
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obvious to a person skilled in the art that many alternations 
thereof, omissions therefrom and additions thereto can be made 
without departing from the essences of scope of the present 
invention. Accordingly, it should be understood that the 
5 invention is not intended to be limited to the specific forms of 
embodiment thereof set forth below, but to include all possible 
forms of embodiment thereof that can be made within the scope 
with respect to the features specifically set forth in the appended 
claims and encompasses all the equivalents thereof. 
10 A detailed description will first be given in respect of a 

typical, first form of embodiment of a quantum cipher 
communication system of the present invention. 

Fig. 1 is a schematic diagram that illustrates a quantum 
cipher communication system implemented in a first form of 
15 embodiment according to the present invention. 

Referring to Fig. 1, the quantum cipher communication 
system in this form of embodiment of the invention comprises an 
apparatus in a sender's side 10, a pair of paths of transmission 
14 and 16 and an apparatus in a recipient's side 12. The sender's 
20 apparatus 10 includes a light source for a laser beam 1, a beam 
splitter 2, a mirror 3 and a light attenuator 4. 

A light from the laser light source 1 is split into a 
reference light L and a quantum signal light S by the beam 
splitter 2. The mirror 3 that reflexes the signal light S is adapted 
25 to be movable by a distance which is as small as the wave length 
of the signal light S to make a phase change of the signal light S 
and hence a relative phase difference between the reference and 
signal lights L and S. 

The light attenuator 4 is used to attenuate the quantum 
30 signal light S to an extent that it has a typical intensity which is 
so weak as it corresponds to a single photon or so and such that a 
change in its quantum mechanical state is detectable 
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The reference light L is endowed with a typical intensity 
which is so intense as it corresponds to photons as large as 10 
millions in number. Thus, the reference light L is adjusted to be 
extremely higher than and radically different in intensity from 
5 the signal light S. 

Thus, using the reference light L which is so intensified 
and made much stronger than the signal light which is so weak 
as described permits efficient detection and measuring such a 
quantum signal light S in its quantum state. 
10 The recipient apparatus 12 includes a mirror 5 adapted 

to be movable by a distance which is as small as the wave length 
of the light, a beam splitter 6 which has a transmittance and 
reflectance equal to each other, a pair of photoconductor diodes 
7a and 7b, and an output unit 8 comprising an amplifier and a 
15 voltage measuring device. 

The recipient may alter the relative phase difference 
between the reference and signals lights L and S. Then, these 
lights L and S are superimposed on the beam splitter 6. The 
two output lights from the beam splitter 6 then come incident on 
20 the photoconductor diodes 7a and 7b, respectively, for conversion 
into respective electric signals. Then a difference between these 
signals is amplified and an output voltage is measured and taken 
as a signal difference. For the amplifier, use is made of a charge 
sensitive amplifier a typical gain of which is 30 volts/pC (pico 
25 coulombs). Then, if the signal difference contains ten thousands 
( 10, 000) electrons the output voltage will have a magnitude of 
50 mV. 

For the photoconductor diodes 7a and 7b, use is made of 
the Si type for a light having a wave length of 600 to 900 nm and 
30 of the InGaAs type for a light having a wave length of 1000 to 
1500 nm. Then, a quantum efficiency as high as 90 % or more and 
in the optimum case 99 % or more can be obtained. Thus, in the 
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optimum case, for example, ten thousands (lO, OOO) photons 
making up the intense reference light L can be converted into 
ninety nine hundreds (9900) electrons whose number can be 
measured at a good S/N ratio, 
5 An explanation is next given in respect of signal 

processing by the recipient. In the description that follows it is 
assumed for the sake of simplicity that the photoconductor 
diodes 7a and 7b have a quantum efficiency of 100 % and the 
amplifier has a noise negligible. 

10 Referring to Fig. 1, the signal light S and the reference 

light L split into by the beam splitter 2 and then separately 
transmitted along their own optical paths are superposed at the 
beam splitter 6 where a difference in optical path between these 
lights causes an interference. 

15 However, an extreme difference in intensity between the 

two lights renders the resulting interference pattern or fringe 
rather unclear. 

Figs. 2 A and 2B are graphical representations that 
explain a signal that is observed in the recipient side for a signal 

20 light with a fluctuation in its quantum mechanical state not 
taken into account. There, Fig. 2A is a graphical representation 
showing a relationship of the numbers of photons incident onto 
the photoconductor diodes with respect to a relative difference in 
optical path between the reference signal light and a quantum 

25 signal light with a diagram inserted showing in enlargement the 
relationship in a range in which the difference in optical path is 
close to zero, and Fig. 2B is a graphical representation of a signal 
difference between the reference signal light and the quantum 
signal light. 

30 The beam splitter 6 is here so adjusted that in the 

absence of a signal light S it splits the reference signal L into two 
at a ratio of 1/1. Therefore, the number of photons which are 
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incident onto each of the two photoconductor diodes 7a and 7b 
measures one half of the number of photons of the reference light 
L * no, hence no/2. Thus, as shown in Fig. 2 A, with the value no/2 
as its center a small interference pattern or fringe appears 
5 according to a relative difference in optical path between the two 
lights L and S. With the output signals which the two 
photoconductor diodes 7a and 7b provide for the strength or 
weakness of the interference fringe being in opposite phase with 
each other, finding the difference between the two output signals 

10 (difference signal) allows locating the very portion of the 
interference pattern itself as indicated in Fig. 2B. In this case, 
the amplitude of the interference pattern may be expressed by 
twice the square root of the product of the number of photons n^ 
of the signal light S and the number of photons Uq of the 

15 reference light L, namely by 2j~^iJ~no. It should be noted in this 
connection that the amplitudes of the signal light S and the 
reference light L are each the square root of the number of 
photons and are thus /' n^ and Uo, respectively. Hence, the 
maximum value of the difference between the signals incoming 

20 and thus outgoing of the photoconductor diodes 7a and 7b can be 
expressed by- 

[(^ni + /"no) V 2 - (J~n, - /"no) V2] = 24~n^^n^ 
It should further be noted that those indicated above 
each represent an average value that can be derived from a large 
25 number of measurements, and that each of the measurements for 
the difference signal, that is the difference in magnitude between 
the signals (indicating the two output lights in opposite phase 
from the beam splitter 6), involves a fluctuation in value due to a 
quantum fluctuation of the signal light represented by a 
30 standard deviation of 4~ Uq 

Figs. 3A to 3D are graphical representations that explain 
a difference signal that is measured in a recipient side with a 
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fluctuation in the quantum mechanical state of the signal light 
taken into account. There, the signal is shown for an optical path 
difference in terms of phase difference of 0 degree, 90 degrees (A 
/4), 180 degrees (A/2), and 270 degrees (3 A/4), respectively. And 
5 in each graph the abscissa represents the magnitude of a 
difference signal and the ordinate represents the probability that 
the difference signal is measured 

It should be noted as regards the above that character A 
designates the wave length of the light and that the abscissa in 
10 each of the graphs is normalized by dividing the difference signal 
by 2/" no. 

As shown in Figs. 3A to D, the frequency distribution of 
the difference signal found if the quantum signal light S is in a 
coherent state in which an average number of photons is as small 

15 as 1 is represented by a Gaussian distribution as a function of 
the relative difference in optical path (in terms of phase 
difference) between the quantum signal light S and the reference 
light L. Figs. 3A, 3B, 3C and 3D show that the Gaussian 
distribution has an average value of +1, 0, -1 and 0, when the 

20 optical path difference is 0, 90, 180 and 270 degrees, respectively, 
each with a standard deviation of 0.5. 

Therefore, in order to execute ciphering or encryption, 
the recipient is allowed to use the results of measuring the 
difference signal to determine if the optical path difference is 

25 either 0 degree or 180 degrees. Thus, the recipient is just 
required to discriminate between the patterns of Figs. 3A and 3C, 
To do this, threshold values X- and X+ may be set and finding the 
difference signal to be equal to or greater than X+ and to be equal 
to or less than X" allows the recipient to determine the optical 

30 path difference to be 0 and 180 degrees, respectively. 

In this way, establishing the threshold values X- and X+ 
permits the effective detection efficiency and error rate to be 
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given with freedom. For instance, with the assumption that 
where nl = 1 as above, X- = X+ = 0, the probability that the 
optical path difference when it is 0 degree is judged to be 0 
degree is as high as 97.7 % which is given by integrating the 
5 Gaussian distribution from [(average value) - (twice the standard 
deviation)] to infinity. On the other hand, the probability(error 
rate) that the optical path difference when it is actually 180 
degrees is misjudged to be 0 degree is as low as 2.28 % which is 
given by integrating the Gaussian distribution from [(average 

10 value) + (twice the standard deviation) to infinity. Also, if X- = 
-0.5 and X+ = 0.5 are assumed, computation likewise gives a 
detection probability reduced to 84.1 %, but yields an error rate 
reduced to as low as 0.13 %, thus giving rise to the performance 
much higher than that which has so far been achievable. 

15 Figs. 4A and 4B are graphical representations that 

illustrate typical measurement results that were obtained 
according to the first form of embodiment of the present 
invention. The graph of Fig. 4A shows a frequency distribution 
for the difference signal taken along the ordinate with respect to 

20 the voltage actually measured 5000 times and taken along the 
abscissa and the graph of Fig. 4B illustrates a Wigner 
distribution function derived by computer tomography from data 
that were obtained when such a measurement made to obtain the 
result shown in Fig. 4A were repeated 30 times. 

25 The Wigner distribution function is one of the methods of 

representing a signal light in its quantum state, and the fact 
here that the Wigner distribution function was derived indicates 
that the signal light in its quantum state is actually observable. 

In the observation in this form of embodiment of the 

30 invention, voltage values of the difference signal for 5000 (five 
thousands) output light pulses were measured to obtain a 
frequency distribution. Fig. 4A shows that the frequency 
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distribution follows a Gaussian distribution. It should be noted 
that the abscissa of Fig. 4A has plotted along measured voltages 
which to allow direct comparison with the graph of Fig, 3 need to 
be corrected for the gain of amplifier and the intensity of the 
5 reference light. 

On making such correction, it is confirmed that the width 
of the distribution observed (the magnitude of the fluctuation of 
the difference signal) agrees with the width that was predicted 
as the quantum fluctuation. 

10 In deriving the Wigner distribution function shown in 

Fig. 4B, data were gathered from measurements that were 
repeated 30 times the measurements which measured the 
difference signal 5000 times while varying the optical path 
difference, hence the data from measurements of 150,000 output 

15 light pulses. 

It is therefore seen that the present invention so far 
described in its first form of embodiment makes it possible to 
measure and observe a signal light in its quantum state by 
measuring it while varying its optical path difference, i. e., the 

20 difference in optical path between a reference light and the 
quantum signal light. And, since the Wigner distribution 
function of a given quantum signal light contains all the 
information knowledgeable or that can be known theoretically of 
the signal light, it is here rendered possible to detect the 

25 presence of a wiretapper with greater simplicity , thus from 
information on a change in the signal light. 

An explanation is next given in respect of a process of 
quantum cipher operation or encryption according to the present 
invention. 

30 Fig. 5 is a tabular diagram that illustrates a process of 

quantum cipher operation or encryption according to the present 
invention. There, in the left hand side column, numeral 1 is 
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used to show that the row which follows right represents a phase 
modulation (change) made by a sender, numeral 2 (row 2) a phase 
modulation made by a recipient, numeral 3 (row 3) a sum total of 
the sender's and recipient's phase change or modulations, 
5 numeral 4 (row 4) a result of measurement by the recipient, 
numeral 5 (row 5) indicates that the sender is notified by the 
recipient on a public communication line of the recipient's added 
phase change and tells or have told the recipient about the sum 
total of the phase changes to make 0 or 180 degrees O or OK 

10 and to make 90 or 270 degrees X or NG (no good), numeral 6 
(row 6) indicates that the recipient makes its privacy (or secret) 
key by assigning bit 1 to plus (+) and bit 0 to minus (■) when O 
(OK) is the case, and finally numeral 7 (row 7) indicates that the 
sender assigns bit 1 when its own phase modulation is 0 or 90 

15 degrees and bit 0 when it is 180 or 270 degrees, thereby making 
its privacy key. It should be noted that here for the sake of 
simplicity the error rate is regarded as 0. 

First, the sender by controlling the position of the mirror 
3 shown in Fig. 1, randomly imparts to a quantum signal light S, 

20 phase changes 0, 90, 180 and 270 degrees (see the row 1 in the 
table of Fig. 5). On the other hand, the recipient by controlling 
the position of the mirror 5 imparts to a reference signal L, 
random phase changes 0 and 90 degrees (as shown in the row 2 of 
the table in Fig. 5). Then, the sum total of the difference in 

25 optical path between the reference and quantum signal lights L 
and S or the optical path difference of the system will be the 
difference between the phase changes or modulations which the 
sender and the recipient made, respectively (see the row 3 of the 
table in Fig. 5). 

30 Further, the recipient applies to its measurement results 

a setting for the threshold values X- and X+ as described above, 
and gives the sign if the difference signal mentioned above is 
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found to be equal to or less than X- and gives the sign if the 
difference signal is found to be equal or greater than Xh- (as 
shown in the row 4 of the table in Fig. 5). Then, it can be seen 
that the sign + and the sign - are bound to appear in columns for 
5 the row 4 when the columns have for the row 3 the values 0 and 
180 degrees, respectively, and that the sign + and the sign - 
appear at an equal probability in columns for the row 4 when the 
columns for the row 3 have the values of 90 and 270, respectively 
(see the rows 3 and 4 in the table of Fig. 5). 

10 Then, the recipient in relation to the bit 0 or the bit 1 

notifies the sender on the public communication line of which of 0 
and 90 degrees of phase change imparted to the reference light in 
its phase modulation (see the column 5 in the table of Fig. 5). 

The sender then notifies the recipient that the case is 

15 being adopted as a privacy key in which the total optical phase 
difference is either 0 or 180 degrees. That is, the sender notifies 
the recipient of the sign O or OK when the sum total of the 
phase changes or modulations is either 0 or 180 degrees and of 
the sign X or NG when it is either 90 or 270 degrees (see the 

20 row 5 in the table of Fig. 5). 

The recipient applies the bit 1 to the sign + and the bit 0 
to the sign - when O (OK) is the case and makes the same its 
privacy key (see the row 6 in the table of Fig. 5). 

And, the senders gives bit 1 to its added phase changes of 

25 0 and 90 degrees and bit 0 to those of 180 and 270 degrees and 
makes the same its privacy key (see the raw 7 in the table of Fig. 
5). 

As shown in Fig. 5, it will thus be seen that the privacy 
keys so produced as described above agree invariably with each 
30 other. 

An explanation is next given in respect of a method of 
sensing a wiretap or eavesdropping 
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On a quantum mechanical level, the principle applies 
that any measurement affects the object measured. And, since 
any performed attempt to wiretap or eavesdrop by a third party 
causes a change in its observing quantum signal, it is impossible 
5 for a third party to learn a privacy (secret) key contained in the 
signal being transmitted without being noticed by the sender and 
recipient. 

The specific form of a change caused to the quantum 
signal varies depending on a particular step which the 

10 wiretapper attempts to take. For example, assume that the 
wiretapper is taking the step to obstruct or intercept a quantum 
signal light to read information it contain and then to resend the 
signal. Then, if the wiretapper attempts to make the same 
measurement as will be done by the recipient as mentioned above 

15 in order to read the signal information, its imparting a wrong 
signal modulation or change to the reference light signal (such as 
such that its added sum total to the sender's imparted signal 
modulation becomes 90 or 270 degrees) results in failure to 
resend the recipient the correct signal. 

20 Also, because it is universally impossible from the 

principle of uncertainty relation to obtain information from both 
of the two amplitude components which are 90 degrees apart 
from each other, whatever step it is taking to read the 
information the wiretapper will be unable to acquire correct 

25 information, and from any such attempt there will appear of 
necessity an increase in the error rate. That is, there will only be 
a disagreement in privacy key between the sender and the 
recipient. For example, if the wiretapper is taking the step to 
once interrupt the signal light and then to resend the signal, a 

30 disagreement in privacy key does occur at a probability of 1/4 
which is the product of probability* 1/2 to make an improper 
phase modulation and probability: 1/2 to resend any signal as a 
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wrong signal. 

Accordingly, from inconsistency found between their 
privacy keys on checking them in part the parties will be able to 
detect a third party's attempt to wiretap. 
5 Also, it can be assumed that the wiretapper is taking the 

step to isolate and measure a portion of a signal light to acquire a 
portion of information en route and to offset a resultant loss of 
the signal light by amplification. This is a case in which any 
conventional quantum cipher is hard to detect wiretapping. In 

10 accordance with the present invention, however, such a 
wiretapping does appear as a change in the Wigner distribution 
function which enables the recipient to readily notice it. This is 
because a process of amplification is accompanied of necessity by 
an increase and decrease in the quantum fluctuation. It does 

15 appear as a increase and decrease in the dispersion or variance 
in measurement results as shown in Fig. 4A. As a result, the 
Wigner distribution function may in its graphical distribution 
become thicker or unsymmetrical about its peak value. Also, if 
the wiretapper makes the amplification only after it has access to 

20 definite information, the values XI and X2 that make the peak 
value must vary. 

An explanation is next given in respect of a second form 
embodiment of the present invention. 

The second form of embodiment supposes using a single 

25 optical fiber for paths of signal transmission, and represents a 
practical form of implementation that is designed to permit a 
process of quantum cipher operation or encryption across a long 
distance for which the first form of embodiment if it remains as 
described above is hard to be practiced. To this end, the reference 

30 and quantum signal lights are split into both on the basic of time 
and as polarized, and are transmitted along the common optical 
path. The recipient signal processing operation and the process 
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of quantum cipher operation are basically the same as those 
described above in connection with the first form of embodiment. 

Besides the procedures by the sender and recipient of 
phase modulation and quantum ciphering, there are added 
5 operations to enhance the stability of an optical path difference 
and to monitor the quantum state by additionally giving 
preselected phase modulations. 

To enhance the stability of a difference in optical path, a 
difference signal predicted if a preselected phase modulation is 

10 given is compared with an actual difference signal measured. 
The quantum state can be monitored by giving a uniformly 
changing phase modulation as a preselected phase modulation. 

Fig. 6 diagrammatically illustrates a quantum cipher 
system according to the second form of embodiment of the 

15 invention. 

Referring to Fig. 6, the system according to the second 
form of embodiment includes in the sender's side a laser light 
source 21 that produces a linearly polarized pulsed light; a beam 
splitter 22 that splits the pulsed light into two signal lights, i. e., 

20 a reference signal light L and a quantum signal light S; a half- 
wave plate 24 that rotates the polarization of the signal light S 
by 90 degrees; a light attenuator 25 in which an absorbing 
medium weakens the intensity of the signal light S; a phase 
modulator 26 for changing the phase of the signal light S; and a 

25 polarized beam splitter 23 that returns the reference and 
quantum signal light L and S onto a common optical path or axis 
and then to make both the reference and quantum signal lights L 
and S incident into an optical fiber 27. Then, the quantum and 
reference signal lights S and L are polarized to lie orthogonal to 

30 each other and mutually spaced apart in time. In Fig. 6, 
reference characters 18 and 19 designate mirrors. 

With the system constructed as described above, the 
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quantum and reference signal lights S and L are allowed to 
travel in different paths only in the sender and recipient sides 
and each of a short distance and for the most part along a 
common path of transmission. Thus, a variation of the relative 
5 difference in optical path between the two signal lights can be 
made small. 

Further, a phase modulation in which the value is later 
determined to eliminate any possible effect of a variation of the 
difference in optical path and a phase modulation for 

10 transmitting a privacy key are given. 

The table in Fig. 7 shows a process of giving phase 
modulation in the system representing the second form of the 
present invention. 

With reference to Fig. 7 for further explanation, numeral 

15 1 in the left column is used to indicate that the row (row l) that 
follows right.represents a phase change or modulation the sender 
gives. The numerals underlined in the row 1 indicate phase 
changes for transmission of a privacy key. Numeral 2 (row 2) 
represents a phase modulation the recipient gives, Numeral 3 

20 (row 3) represents a total sum of the sender's and recipient's 
given phase modulations, numeral 4 (row 4) represents a 
recipient's measurement result, numeral 5 (row 5) indicates that 
the sender is notified by the recipient on a public communication 
line of the recipient's added phase change and tells or have told 

25 the recipient about the sum total of the phase changes to make 
cases with 0 or 180 degrees O or OK and the sum total of the 
phase changes of not O or not 180 degrees, numeral 6 (row 6) 
indicates that the recipient makes its privacy (or secret) key by 
assigning bit 1 to plus (+) and bit 0 to minus (■) when O (OK) is 

30 the case, and finally numeral 7 (row 7) indicates that the sender 
assigns bit 1 when its own phase modulation is 0 or 90 degrees 
and bit 0 when it is 180 or 270 degrees, thereby making its 
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privacy key. 

In the case of a later determined phase modulation 
(found in the row 5 of the table in Fig. 7), the ability to predict an 
average value of difference signals permits making an estimate 
5 for a variation in the difference in optical path conversely from 
such an average value of actual difference signals measured. 

Thus, even with a variation or fluctuation present in the 
optical path difference by reason of an external cause, it is still 
made possible to effect a correction such as to cancel its adverse 
10 effect. 

It is possible to obtain the quantum state of a signal light 
by means of computer tomography from data for the difference 
signal in a varied phases. 

It is thus seen that the present invention enables 
15 measuring or observing the quantum state of a signal light while 
making correction for a variation in its optical path difference 
simultaneously. 

Industrial Applicability 

20 As will be apparent from the foregoing description, a 

quantum cipher communication system according to the present 
invention allows measuring or observing the quantum 
mechanical state of a transmission signal while permitting it to 
be detected at a substantially high quantum efficiency. 

25 It is therefore seen that a quantum cipher 

communication system of the present invention is a highly useful 
cipher communication system that makes any attempt by a third 
party to wiretap or eavesdrop unsuccessful. 
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m aims' 

What is claimed is- 

1. In quantum cipher communication using a light signal, 
5 a quantum cipher communication system characterized by the 

step of detecting eavesdropping based on a change in a 
quantum-mechanical probability distribution defined by an 
amplitude and a phase in a difference signal derived from a 
signal light which change is produced by an eavesdropping 
10 operation, 

2. A quantum cipher communication system as set forth 
claim 1, in said quantum cipher communication, characterized by 
the steps of- 

15 splitting a light signal from a transmission source side 

into an intense reference signal and a weak transmission signal 
which is so weak that a change in its quantum mechanical state 
is detectable; 

imparting a phase difference between said reference 
20 signal and said transmission signal while they are in a process of 
transmission; 

superimposing in a transmission receiving side said 
reference signal and said transmission signal to form two output 
lights which are opposite in phase and producing a difference 
25 signal which is represented by a difference between said two 
output lights; 

deriving a frequency distribution of said difference signal 
as a function of a fluctuation of the quantum state of said 
transmission signal; 
30 based upon or in accordance with the frequency 

distribution of said difference signal, making privacy (secret) 
keys respectively at said transmission source and receiving sides 
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for holding in common thereby; and 

directly observing the fluctuation of the quantum state of 
said transmission signal. 

5 3. A quantum cipher communication system including: 

a first beam splitter for splitting a light from a light 
source into a transmission signal and a reference signal; 

a phase modulating means for imparting a phase 
modulation to said transmission signal; 
10 a light attenuator for converting said transmission signal 

into a weak transmission signal which is so weak that a change 
in its quantum state is detectable; and 

a phase modulating means for imparting a phase 
modulation to said reference signal, said system also including, 
15 operative after a relative phase difference is imparted between 
said transmission and reference signals ^ 

a second beam splitter for superimposing said phase- 
modulated weak transmission signal and said phase modulated 
intense reference signal to form two output lights; 
20 a first and a second photoelectric conversion elements for 

converting said two output lights from said second beam splitter 
into two corresponding electric signals which are opposite in 
phase; and 

an amplifier for amplifying a difference signal 
25 representative of a difference between said two output lights to 
output an amplified corresponding voltage. 

4. A quantum cipher communication system as set forth 
in claim 3, characterized in that said phase modulating means 
30 includes a mirror movable by a distance as small as the wave 
length of an incident light. 
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5. A quantum cipher communication system as set forth 
in any one of claims 1 to 4, characterized in that said reference 
signal and said transmission signal are split both in time and as 
polarized and then transmitted to travel along a common path. 

5 

6. A quantum cipher communication system including^ 

a first beam splitter for splitting a light from a light 
source into a transmission signal and a reference signal; 

a first light polarizer for polarizing said transmission 
10 signal through longer one of two distance paths; 

a light attenuator for converting said transmission signal 
into a weak transmission signal which is so weak that a change 
in its quantum state is detectable; 

a first phase modulating means for imparting a 
15 predetermined phase modulation to said transmission signal; 
and 

a first polarized beam splitter for receiving said intense 

reference signal having passed through shorter one of two 

distance paths and said transmission signal and returning the 
20 received signal to travel along a common optical path, said 

system also including, operative after a relative phase difference 

is imparted between said transmission and reference signals and 

included in a transmission receiving side- 

a second polarized beam splitter for isolating from each 
25 other said transmission and reference signals transmitted 

through a single optical fiber; 

a second phase modulating means for imparting a phase 

modulation to said isolated transmission signal through shorter 

one of two distance paths; and 
30 a second light polarizer for polarizing said isolated 

reference signal through longer one of two distance paths, said 

system further including* 
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a second beam splitter for superimposing said 
transmission and reference signals which are coincident with 
each other in time and polarization to produce two output lights; 

a first and a second photoelectric conversion elements for 
5 converting said two output lights into corresponding electric 
signals which are opposite in phase; and 

an amplifier for amplifying a difference signal 
representative of a difference between said two output lights to 
output an amplified corresponding voltage. 

10 

7. A quantum cipher communication system as set forth 
in claim 6, characterized in that a third light polarizer is 
provided in an output side of said optical fiber for making a 
correction for a disturbance of polarization of said reference 

15 signal. 

8. A quantum cipher communication system as set forth 
in any one of claims 1 to 7, characterized in that threshold values 
are established, respectively, for positive and negative values of 

20 said difference signal, and that the state of said transmission 
signal is discriminated on the basis of said threshold values. 

9. A quantum cipher communication system as set forth 
in any one of claims 1 to 8, characterized in that in addition to 

25 the phase modulations designed to transmit privacy keys, such a 
phase modulation is so imparted as described and having a value 
later determined for making a correction for a fluctuation of the 
difference in optical path between said reference signal and said 
transmission signal which develops by reason of an external 

30 cause. 

10. A quantum cipher communication system as set forth 



-29- 



in any one of claims 1 to 9, characterized in that such phase 
modulations are so imparted as described and including those for 
transmitting privacy keys and those with values later 
determined are randomly repeated. 

5 

11. A quantum cipher communication system as set forth 
in any one of claims 1 to 10, characterized in that eavesdropping 
is detected on the basis of an increase in the error rate of said 
difference signal. 

10 

12. A quantum cipher communication system as set forth 
in any one of claims 1 to 11, characterized in that eavesdropping 
is detected on the basis of a change in a Wigner distribution 
function that indicates a quantum mechanical state of said 

15 difference signal. 

13. A quantum cipher communication system as set forth 
in any one of claims 1 to 12, characterized in that said two output 
lights are converted into corresponding electric signals through 

20 photoconductor diodes. 

14. A quantum cipher communication system as set forth 
in any one of claims 1 to 13, characterized in that for said 
photoconductor diodes, use is made of silicon photoconductor 

25 diodes when the light has a wave length of 600 nm to 900 nm, and 
of InGaAs photoconductor diodes when the light has a wave 
length of 1000 nm to 1500 nm. 
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Abstract 

A quantum cipher communication system is disclosed in 
which the sender is equipped with a laser light source (l) and a 
5 light attenuator (4), the recipient is equipped with a amplifying 
and voltage measuring device (8). Mirrors (3) and (5) are movable 
by a distance as small as the wave length of a light to vary the 
phase of the signal light (S). The light attenuator (4) is used to 
weaken the intensity of the signal light (S) to an extent as 
10 represented by a single photon or so such that a change in its 
quantum mechanical state is detectable. 

The quantum cipher communication system disclosed is 
highly useful as a cipher communication system which will make 
any attempt to wiretap by a third party unsuccessful. 
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